Skip to content
OpenAdvisories

Package · Go

github.com/ncarlier/webhookd

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-59157

    webhookd: Unrestricted HTTP Header to Shell Variable Injection

    webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd deployments without htpasswd authentication forwarded all incoming HTTP headers through HTTPParamsToShellVars in pkg/ap…

    ncarlier webhookd github.com/ncarlier/webhookd Go